← Back

Bower

bower

Vendor: Bower • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-5484
1Bower
1Bower
Jun 17, 2026
Sep 13, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitrary files when a malicious package is extracted.